https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T05:44:31.922875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08197 bdu:2025-08197 2026-10-19T05:44:31.926860+00:00 bdu:2025-08197 https://cve.radiocsirt.org/vuln/euvd-2026-226759 EUVD-2026-226759 2026-10-19T05:44:31.926901+00:00 EUVD-2026-226759 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27427 fkie_cve-2025-27427 2026-10-19T05:44:31.926916+00:00

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When combined with the send permission and automatic queue creation a user could successfully send a message with a routing-type not supported by the address when that message should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address.

This issue affects Apache ActiveMQ Artemis from 2.0.0 through 2.39.0.

Users are recommended to upgrade to version 2.40.0 which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-3w85-5p9g-h334 GHSA-3w85-5p9g-h334 — Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type 2026-10-19T05:44:31.926952+00:00

Affected: Maven: org.apache.activemq:artemis-server

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When combined with the send permission and automatic queue creation a user could successfully send a message with a routing-type not supported by the address when that message should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address.

This issue affects Apache ActiveMQ Artemis from 2.0.0 through 2.39.0.

Users are recommended to upgrade to version 2.40.0 which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0670 WID-SEC-W-2025-0670 — Apache ActiveMQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-19T05:44:31.926981+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen.